0

I don't know if I am going about this in the right way, but here's what I need to do. I have a website that's available on the internet. But I have some users who only have access to the intranet. I want to create a proxy to allow these users to access this one site. What I've set up right now is an Nginx set up where it listens for bproxy on aproxy.com and forwards the user to whatever the arguments are.

I've also set up the firewall to only allow access to the IP address 127.0.0.1.

I'm using proxy_pass http://$args, to redirect the user to the arguments in www.aproxy.com/bproxy?www.somesite.com. Now, if the argument is www.google.com, it is redirecting the user to www.google.com/bproxy?www.somesite.com. This obviously throws an error, since bproxy is not a path on somesite. What I would like, is for the browser to continue to show http://aproxy.com/bproxy?www.somesite.com, but for the user to see www.google.com.

This does not happen if I directly use http://aproxy.com/?www.somesite.com. Now the issue I'm facing is that any relative path in www.somesite.com like /img/imagei.gif becomes aproxy.com/img/image1.gif, instead of www.somesite.com/img/image1.gif.

I don't know how to proceed and would really appreciate some help.

TKS
  • 3
  • 1

1 Answers1

1

There's something that you haven't thought of yet - even if you can get to proxy.local/somesite.com, all the links will still point to somesite.com. Apache has a module for overcoming this issue (that I've never used), however NGinx does not. You should try Squid, you can set up ACLs that limit which sites get access and it's supported by pretty much everything. Similarly there's a really old perl script called nph-proxy.cgi that works quite well.

  • I ran into this exact problem with nginx last year. –  Jul 02 '14 at 20:46
  • .So do I set up Squid along with Nginx, or replace Nginx with Squid? – TKS Jul 02 '14 at 20:53
  • I was suggesting replacing nginx with squid, and having your users add an http proxy to their browser configs. NPH-Proxy is closer to what you were doing before though: program: http://www.jmarshall.com/tools/cgiproxy/releases/cgiproxy.latest.tar.gz example: https://ultraproxy.us/ The specific functionality to rewrite returned URLs in apache is mod_proxy_html btw (http://httpd.apache.org/docs/current/mod/mod_proxy_html.html) –  Jul 02 '14 at 21:27